Senior Manager, Technology & Cyber Risk Governance

We’re building a relationship-oriented bank for the modern world. We need talented, passionate professionals who are dedicated to doing what’s right for our clients.

At CIBC, we embrace your strengths and your ambitions, so you are empowered  team members have what they need to make a meaningful impact and are truly valued for who they are and what they contribute.

To learn more about CIBC, please visit

As the Senior Manager, Technology & Cyber Risk Governance, you will be responsible for conducting risk assessments, providing advisory to TI&I Technology and Cybersecurity business leaders, and reporting on operational risk and controls. You will support the identification, escalation, assessment, and mitigation of risks in Technology & Cybersecurity, driving continuous improvement in control compliance and procedures. You will research and apply industry and organization frameworks to support the organization during the risk assessment process to identify and evaluate risks and controls according to operational risk standards, policies and procedures.

Additionally, you will stay updated on industry trends and regulatory changes affecting technology and cyber risk and make sound recommendations that influence appropriate risk treatment to minimize residual risk, and partner with the business to remediate existing deficiencies in a timely manner. You will work closely with cross-functional teams to establish and maintain robust control frameworks while acting as an integrator and liaison with all lines of defense with effective communication as you consult on risk profiles, emerging trends, and any new risks arising from regulatory changes.

At CIBC we enable the work environment most optimal for you to thrive in your role. You can effectively perform all work activities remotely, and will only be required to be on-site on an occasional basis.

• Internal Client Engagement – Meet with internal clients to understand their priorities and advise them on technology and cybersecurity risk management solutions. Use your knowledge of cybersecurity and technology to protect the organization by providing proactive advisory services to the technology and cybersecurity teams in deploying risk management measures and in remediating known issues.
• Risk Management – Leverage your technology and cyber security risk management expertise to share your knowledge by introducing ideas to the organization to continuously maintain an acceptable risk posture that is aligned with industry peers, regulatory requirements, and CIBC’s risk appetite.
• Communication – Exhibit strong verbal and written communication skills. You will communicate effectively with internal and external teams, and different lines of business.
• Relationship Management – You’ll create trusted advisory relationships with all partners across all lines of defense, inclusive of Operational Risk Management, Internal Audit, Enterprise counterparts, and control assessment teams.
• Collaboration – Engage with cross functional teams across all three lines of defense to foster open communication, value diverse perspectives, ensuring that all voices are heard, and contributing to shared success. You will build trust within the team, encouraging a supportive environment that enhances creativity and problem-solving.
• Time and Project Management – Leverage your strong project management skills to proactively manage timelines by keeping direct managers and internal clients informed of predicted/ preliminary results and proactively communicate reasonable estimated time to completion by avoiding working up to the last minute.
• Understand Requirements – Conduct analysis of processes and functional requirements to provide proactive advice and guidance to internal stakeholders to ensure that the requirements and work packages are appropriately defined and completed.

• You have a degree/diploma in accounting, cybersecurity, technology, finance or a related field. Minimum of 5-7 years of experience in technology or cybersecurity front-line testing/audit/enterprise/operational risk management/or management consulting coupled with…